Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
CVSS Details
- CVSS 3.1 Base Score: 5.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade giflib-develUpgrade giflib | May 3, 2026 | Apr 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade giflib-utilsUpgrade giflib-debuginfoUpgrade giflib-develUpgrade giflib | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade giflib-debugsourceUpgrade giflibUpgrade giflib-utils-debuginfoUpgrade giflib-develUpgrade giflib-utilsUpgrade giflib-debuginfo | Apr 7, 2026 | Mar 10, 2026 |
| Debian | — | Upgrade giflib | Jun 28, 2026 | Jun 28, 2026 |
| Oracle_linux | — | Upgrade giflib-utilsUpgrade giflibUpgrade giflib-devel | Apr 22, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade giflib-utils-debuginfoUpgrade giflib-debuginfoNo solution existsUpgrade giflib-utilsUpgrade giflibUpgrade giflib-debugsourceUpgrade giflib-devel | Apr 21, 2026 | Mar 10, 2026 |
| Rocky_linux | — | Upgrade giflib-develUpgrade giflib-debuginfoUpgrade giflib-debugsourceUpgrade giflib | Apr 23, 2026 | Apr 21, 2026 |
| Ubuntu | — | Upgrade giflib-toolsUpgrade libgif7 | Jul 22, 2026 | Mar 10, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub